Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: gERE68yVoCC/PKs/wjV90yvKcS1cdUoZIrZ3rNhl7ZM=
Subject key identifier: F9:0D:70:22:89:C7:E6:18:EE:EF:37:17:38:94:20:7A:50:62:67:A4
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 0196778CB9A3A05235910F2A3F8B60FFA27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 125B
Signing time: Sun 27 Apr 2025 14:00:33 +0000
Manifest this update: Sun 27 Apr 2025 14:00:33 +0000
Manifest next update: Mon 28 Apr 2025 14:00:33 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: m+6v8a2oNtZno1dim54Oasc0JegECADXX16r7wX71qk=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
3: SKVsL0dFPC8nQ8E0Sar1SVELQ-4.roa (hash: Wd6r5Q9d5JNbBO/CAcgZ9Q9+GeT6Xu5kC1/o/UnS0tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:b9:a3:a0:52:35:91:0f:2a:3f:8b:60:ff:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Apr 27 14:00:33 2025 GMT
Not After : Apr 28 14:00:33 2025 GMT
Subject: CN=f90d702289c7e618eeef37173894207a506267a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:ed:b8:e2:35:9c:93:06:18:91:a0:c1:75:
78:d0:00:0d:78:cd:a8:17:aa:8e:47:cc:9d:7e:d9:
c1:53:4f:09:a5:39:64:ae:d6:02:af:fd:a2:92:10:
d5:7a:0c:41:55:d4:7d:dc:5c:aa:ff:70:2b:2c:e7:
9a:3d:92:98:ed:4e:90:ce:23:5e:c4:6d:54:85:2c:
4e:a8:b2:64:00:34:f7:b7:d3:db:95:f0:47:ec:1e:
e6:e6:58:fa:64:f6:eb:f5:e7:0e:f9:7f:21:25:19:
1d:e8:87:14:67:8e:24:29:d3:28:5d:a0:bc:ca:fb:
6b:d3:ef:3d:33:e2:36:d3:c2:ee:09:c6:b9:75:32:
54:81:fa:97:59:c4:ae:9a:a5:26:da:25:d9:f4:5a:
1c:02:c4:e1:8e:45:f4:d0:be:a8:84:49:9d:80:40:
76:a6:d8:9f:5a:17:51:19:8a:30:c7:f8:96:63:4e:
fa:d9:a5:83:5d:95:dc:23:5d:01:1e:c5:02:f5:e5:
66:d4:fa:b5:31:b3:0e:63:15:0e:12:5a:54:58:ac:
9b:64:db:60:d3:73:8d:4c:3f:94:7b:36:39:3e:1c:
9b:c0:ad:31:96:58:fd:38:87:23:68:83:cc:55:54:
14:38:2a:1b:df:2f:c7:1f:6a:8e:d3:55:f6:7b:35:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:70:22:89:C7:E6:18:EE:EF:37:17:38:94:20:7A:50:62:67:A4
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:42:ec:14:1b:29:88:02:7f:ea:e4:ca:da:87:3d:44:5a:78:
7a:43:2f:66:18:1b:3b:2a:f2:2d:02:f7:a6:4d:75:6f:85:b4:
59:b7:a1:28:a5:66:f9:fb:c3:fd:1b:13:bb:7d:66:93:9a:ad:
00:08:ed:dd:c4:64:af:68:db:c5:80:46:64:33:7b:a2:9f:31:
00:06:b1:88:59:8f:1e:1a:4f:62:a7:20:07:bf:7c:7c:2d:af:
df:05:c8:30:e6:0c:46:7e:f9:62:c2:aa:50:6f:43:8b:c6:52:
25:92:84:5c:c6:b3:e2:34:cd:7e:44:a0:1f:0f:50:4d:4c:5e:
ca:d0:66:f8:b9:d7:1d:e3:f9:1d:03:49:34:25:77:f3:53:8b:
17:04:13:d5:45:d0:d4:e7:8f:76:86:df:32:f5:46:4e:69:07:
aa:b5:51:17:04:d5:3b:73:fa:16:6e:37:52:ce:f2:38:69:58:
21:3e:1e:41:e9:fc:9f:8d:89:6f:89:38:47:fa:80:a8:77:02:
db:65:d3:8f:2d:15:8e:65:e3:f7:ee:4f:32:08:88:2e:df:fa:
f4:83:4a:e6:c4:a8:32:48:df:f5:fe:6c:42:7f:30:1e:15:a0:
a6:e2:5e:a2:33:8d:46:4d:3b:f0:84:6e:4b:db:4a:21:50:69:
04:8f:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:38 2025 by rpki-client